VYPR

npm package

gettext-converter

pkg:npm/gettext-converter

Vulnerabilities (1)

  • CVE-2026-55451Aug 20, 2026
    affected < 1.3.3fixed 1.3.3

    ### Impact `js2i18next()` is vulnerable to prototype pollution. When converting translations, it splits nested keys on the key separator (default `##`) and uses each segment as a dynamic object key while building the output object. A key whose segment is `__proto__` (e.g. `__pro